Photon OS 5.0: Python3 PHSA-2025-5.0-91-0515

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0515. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

ROOT-APP-PYPI-CVE-2025-27516 CVE-2025-27516 in Jinja2 - Patched by Root

Root has patched CVE-2025-27516 in the Jinja2 package for Root:PyPI. Multiple fixed versions available...

aiolambda (>=0.2.0, <=0.3.0), alcazar-web-framework (0.0.2) +155 more potentially affected by CVE-2025-27516 via jinja2 (2.10.0)

jinja2 PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - aiolambda =0.2.0, =1.10.3b1, =3.0.0b4, =0.1.0, =0.0.1, =0.2.0, =0.6.7.post3, =0.7.1, =0.1.1, =1.2.1, =0.0.2, =0.0.3 - burl 1.0.0 and more Source...

bb8 (>=0.1.0, <=0.2.6), blendedux (0.0.2) +71 more potentially affected by CVE-2025-27516 via jinja2 (2.8.0)

jinja2 PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - bb8 =0.1.0, =0.3.1, =4.2.6, =0.3.1, =0.9.158, =0.3.0, =0.1.8, =0.1.0, =0.3.7, =0.0.1, =0.1.0, =0.24.0, =0.24.3 - lmdo 2.3.1 and more Source cves:...

activedirectoryenum (>=0.4.0, <=0.4.9), agavepy (>=1.0.0a4, <=1.0.0a5) +82 more potentially affected by CVE-2025-27516 via jinja2 (2.11.1)

jinja2 PYPI version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - activedirectoryenum =0.4.0, =1.0.0a4, =0.1.2, =0.0.27, =4.0.4, =0.3.0, =1.3.1, =1.2.3, =0.1.0, =0.1.0rc1, =1.2.0, =0.0.1, =0.2.1 and more Source...

crossbar (17.3.1), esrally (>=0.5.0, <=1.0.4) +9 more potentially affected by CVE-2025-27516 via jinja2 (2.9.5)

jinja2 PYPI version 2.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - crossbar 17.3.1 - esrally =0.5.0, =0.2.0, =0.2.0, =0.5.0, =1.1.3.0, =1.0.2, =0.0.0, =0.9.14, =0.2.3, =0.1.1, =0.4.4 Source cves: CVE-2025-27516 Sour...

abracadabra (>=0.0.0, <=0.0.5), activedirectoryenum (0.5.0) +255 more potentially affected by CVE-2025-27516 via jinja2 (2.11.2)

jinja2 PYPI version 2.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - abracadabra =0.0.0, =1.0.0, =0.2.0, =0.6.2, =3.4.0, =0.1.0, =0.1.0.dev1, =5.2.15, =1.1.1, =1.5.0, =1.0.0, =1.0.1 and more Source cves: CVE-2025-275...

Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by arbitrary code execution due to Jinja2

Summary Jinja2 is used by IBM Cloud Pak for Data System 1.0 as a template engine for generating dynamic content. CVE-2025-27516 affects Jinja2's sandboxed environment where an oversight in how the |attr filter interacts with the sandbox allows an attacker who controls template content to execute...

Security update for python-Jinja2

This update for python-Jinja2 fixes the following issues: CVE-2025-27516: Fixed sandbox breakout through attr filter selecting format method bsc1238879 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

CVE-2025-27516 affecting package nodejs24 for versions less than 24.13.0-1

CVE-2025-27516 affecting package nodejs24 for versions less than 24.13.0-1. A patched version of the package is available...

Huawei EulerOS: Security Advisory for python-jinja2 (EulerOS-SA-2026-1193)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for python-jinja2 (EulerOS-SA-2026-1142)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.10.0 : python-jinja2 (EulerOS-SA-2026-1193)

According to the versions of the python-jinja2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with...

MiracleLinux 9 : fence-agents-4.10.0-76.el9_5.6 (AXSA:2025-9811:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9811:03 advisory. jinja2: Jinja sandbox breakout through attr filter selecting format method CVE-2025-27516 Tenable has extracted the preceding description block directly from...

MiracleLinux 8 : python-jinja2-2.10.1-7.el8_10 (AXSA:2025-9821:03)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-9821:03 advisory. jinja2: Jinja sandbox breakout through attr filter selecting format method CVE-2025-27516 Tenable has extracted the preceding description block directly from...

Security Bulletin: Vulnerability in Jinja2 affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [CVE-2025-27516]

Summary The Jinja2 package is used by IBM Cloud Pak for Data System 2.0 . IBM Cloud Pak for Data System 2.0 has addressed the applicable CVEs CVE-2025-27516 Vulnerability Details CVEID:CVE-2025-27516 DESCRIPTION: Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the...

SUSE SLES15 Security Update : python-Jinja2 (SUSE-SU-2025:1004-2)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:1004-2 advisory. - CVE-2025-27516: Fixed sandbox breakout through attr filter selecting format method bsc1238879 Tenable has extracted the preceding...

SUSE: Security Advisory (SUSE-SU-2025:1004-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in jinja2-3.1.5-py3-none-any.whl

Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in jinja2-3.1.5-py3-none-any.whl Vulnerability Details CVEID:CVE-2025-27516 DESCRIPTION: Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment...

RLSA-2025:7476 Important: python-jinja2 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...